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Abstract. Considered is the distribution of the cross correlation 
between m-sequences of length 2 m — 1, where m is even, and re- 
sequences of shorter length 2 m / 2 — 1. The infinite family of pairs of 
m-sequences with four- valued cross correlation is constructed and the 
complete correlation distribution of this family is determined. 
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1 Introduction 

Let {a t } and {b t } be two binary sequences of length p. The cross-correlation 
function between these two sequences at shift r, where < r < p, is defined by 

p-i 

C(t) = ^(-i) a *+ 6 *+- _ 

A well studied problem is to find the cross-correlation function between two 
binary m-sequences {s t } and {s^t} of the same length 2 m — 1 that differ by a 
decimation d such that gcd(<i, 2 m — 1) = 1. An overview of known results can be 
found in Helleseth pQ, Helleseth and Kumar [2] and Dobbertin et. al. [3]. 

Recently, Ness and Helleseth jl] studied the cross correlation between any re- 
sequence {s t } of length p = 2 m — 1 and any m-sequences {udt} of shorter length 
2 m / 2 _ 1 ; where m is even and gcd(d, 2 m / 2 — 1) = 1. For convenience, {ut} is se- 
lected to be the m-sequence used in the small Kasami sequence family. The only 
known families of m-sequences of these periods giving a two- valued cross corre- 
lation are related to the Kasami sequences [5] and are obtained taking d — 1. 
Further, families with three-valued cross correlation have been constructed by 
Ness and Helleseth in [3] and [6]. These results were generalized by Helleseth, 
Kholosha and Ness [7] who covered all known cases of three-valued cross correla- 
tion and conjectured that these were the only existing. 

In this paper, we consider pairs of sequences with a four-valued cross correla- 
tion. The first family with such a property was described in [5] . We completed a 
full search for all values of m < 32 and revealed a few examples that did not fit 
into the known family. Most of the cases with four- valued cross correlation occur 
for m = 2nk with n > 2 odd and the decimation 

2 nk _|_ l 

d = — with k > 1 . 

2 k + 1 

The main result of this paper is finding the distribution for this four-valued cross 
correlation. Note that the family found in [8] corresponds to the latter decimation 
when setting n = 3. 
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In Section [2j we present preliminaries needed to prove our main results. In 
Section [31 we give the distribution of the number of zeros of a particular affine 
polynomial A a (x). Section H] provides the distribution of the number of zeros 
of a special linearized polynomial L a (z). The zeros of these two polynomials 
are useful when obtaining the cross-correlation values. Section [5] determines the 
cross-correlation distribution of our four-valued family. 

2 Preliminaries 

Let GF(g) denote a finite field with q elements and let GF(g)* = GF(q) \ {0}. 
The finite field GF(g') is a subfield of GF(q m ) if and only if I divides m. The 
trace mapping from GF(g m ) to the subfield GF(g z ) is defined by 

m/l—l 

Trr(x) = xQH ■ 

i=0 

In the case when I — 1, we use the notation Tr m (x) instead of Tr™(x). The norm 
NJ"(x) of z 6 GF(g m ) over the subfield GF(g') is defined by 

m/l-l 

nt(x) = n x* h . 

i=0 

Let m be even and a be an element of order p = 2 m — 1 in GF(2 m ). Then 
the m-sequence {s t } of length p = 2 m — 1 can be written in terms of the trace 
mapping as 

s t = Tr m O*) . 

Let (3 = a 2m/2+1 be an element of order 2 m//2 — 1. The sequence {ut} of length 
2 m / 2 _ i (which is used in the construction of the well known Kasami family) is 
defined by 

u t = Tr m/2 (/3*) . 

In this paper, we consider the cross correlation between the m-sequences {s t } 
and {v t } = {um} at shift r defined by 

p-i 

C d {r) = J2(-lY t+Vt+T , (1) 
t=o 

where gcd(d, 2 m l 2 — 1) = 1 and r = 0, 1, ... , 2 m//2 — 2. Using the trace repre- 
sentation, Ness and Helleseth [3] showed that the set of values of C^{j) + 1 for 
r = 0, 1, . . . , 2 m//2 — 2 is equal to the set of values of 

S( a ) = (-l) Trm ( aa; ) +Tr W2(^ (2m/2+1) ) (2) 

xeGF(2 m ) 
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when a G GF(2 m/2 )*. 

The main result of this paper is formulated in the following corollary that 
gives a four-valued cross-correlation function between new pairs of m-sequences 
of different lengths. 

Corollary 1 Let m = 2nk and d = , where n > 2 is odd and k > 1. Then 
the cross- correlation function Crf(r) has the following distribution: 

— 1 — 2( n+1 ) fc occurs 2( ^ 2 fc^~ 1 times , 

1 nnk (2 nfe -l)(2 fc - 1 -l) .• 

— 1 — 2 occurs 2*zt times , 

— 1 occurs 2 (n ~ 1 ) fe — 1 tames , 

— 1 + 2" occurs - — 2F^i — times . 

The result will be proved in a series of lemmas and propositions. The outline 
of the proof is as follows. Determining the set of values of Cd(r) + 1 for r = 
0, 1, . . . , 2 nk — 2 is equivalent to finding the set of values of S(a) in (T5]) for a G 
GF(2 nfc )*. Furthermore, we show that 

i=0 

where Si (a) are defined by 

Sj ( a )= {-l)^ ay2k+1)+T ^ nk+1) and 

j,eGF(2 m ) 

^ +w (o) = (-i) Tr - (r " j ^ fe+1)+Tr - fe2nfc+1) 

S/eGF(2 m ) 

for j = 0, 1, . . . , 2 k ~ 1 and with r = a (2" fc -i)2 fc_:l . 

We determine So (a) exactly in Corollary H] and find Sj(a) 2 in Lemma HI Since 
S(a) is an integer, we can resolve the sign ambiguity of all Si (a) for i — 1, 2, . . . , 2 k . 
In order to determine So (a), we need to consider zeros in GF(2 nfc ) of the affine 
polynomial 

A a {x) = a x + x + ax + c , 

where c G GF(2 fe ) and Tr fc (c) = 1. To determine S;(a) 2 for 1 = 1, 2, . . . , 2 k , we 
need to consider zeros in GF(2 2rifc ) of the linearized polynomial 

2 («+l)S i 2 fc 2 k 2 2k i 

L a (zJ = z +r a z + raz , 

2"n-fc_|_-^ 

where n is odd, a G GF(2 nfc ) and r G GF(2 2nfc )* with r 2 " fe+1 = 1 but rWT ^ i. 

When finding the complete cross-correlation distribution, we make use of the 
following lemma from [I]. 
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Lemma 1 ([4|) For any decimation d with gcd(c?, 2 nk — 1) = 1 the sum of the 
cross- correlation values defined in (QP for m = Ink is equal to 



2 nk -2 



3 The Affine Polynomial A a (x) 

In this section, we consider zeros in GF(2 nfc ), with n > 2, of the affine polynomial 

A a (x) = a? h x 22k + x 2k + ax + c , (3) 

where a G GF(2 nfe ) and c G GF(2 fc ). Some additional conditions on the pa- 
rameters will be imposed later. The distribution of zeros in GF(2 nfc ) of ([3]) will 
determine to a large extent the distribution of our cross-correlation function. It 
is clear that A a (x) does not have multiple roots if a ^ 0. 

We introduce a particular sequence of polynomials over GF(2 nfc ) that will 
play a crucial role when finding zeros of ([3]). First, for any v G GF(2 nfc ) denote 
Vi = v T for i = 0, . . . , n — 1 so A a (x) = a\Xi + x± + oqXq + c. Let 

Bi(x) = 1 , 
B 2 (x) = 1 , 

B t+2 (x) = B i+1 (x) + XiB t (x) for 1 < i < n - 1 . (4) 

Observe the following recursive identity that can be seen as an equivalent 
definition of Bi(x) 

B i+2 (x) = Bf +l (x) + xrBf'ix) for 1 < i < n - 1 . (5) 

We prove it using induction on i. For i = 1 and i = 2 this fact is easily checked 
taking the definition. Assuming this identity holds for i < t we get for i = t > 2 

B t+ 2(x) ® B t+1 (x) + x t B t (x) 

= B t [x) + XiB^yx) + XtBt^x) + x t X\B t _ 2 [x) 

= (B t (x) + x t ^B t ^(x)) 2k + xi(B t ^(x) + x t „ 2 B t _ 2 (x)f k 

i Bf +l {x) + x l B t {xf k . 

We also define polynomials Z n (x) over GF(2 nfc ) as 

Z n (x) = B n+1 (x) + xBl^x) . (6) 

The following lemma describes zeros of B n (x) and Z n (x) in GF(2 nfc ). 
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Lemma 2 For any v E GF(2 nfe ) \ GF(2 fe ) let 



2 Ak +l 
V 



V = j— . (7) 



Then for n > 1 

.nk/.. \ n-1 / „. \ 2^ 



i=2 

If n > 1 is odd (resp. n > 2 is even) then the total number of distinct zeros of 
B n {x) in GF(2 nfc ) is equal to 2( ^ 2fc 1 ^~ 1 (resp. 2 " 2 2fcJ~ 2fc J. Moreover, polynomial 
B n (x) splits in GF(2 nfc ) ; all its zeros have the form of with Tr^ fc (t>o) = and 
occur with multiplicity 2 k . 

Proof. First, note that v E GF(2 nfe ) \ GF(2 fc ) if and only if v ^ v 1 which 
guarantees that the denominator in (j7|) and in the above identity for B n (V) is 
not zero. Now, using induction on i we prove that 



[Vi + V 2 ) jJ- 2 \V +ViJ 



i-1 / \ 2 jl 



for 2 < % < n + 1. For i = 2 and z = 3 this identity is easily checked using the 
definition (J4]) of B^x) (for i = 2, we assume the product over the empty set to 
be equal to 1). Assuming this identity holds for i < t we get for i = t > 3 

B t (V) § B t ^(V) + V t ^B t _ 2 (V) 

V>*-1 „ <-2 / \ 2J fc ,,2 2fc +l t-3 ✓ x 2^ 

~ (fl + V 2 ) f} 2 \V + vj (vt-2 + ^-l) 2fc+1 (^l + V2) \\ \V0 + «1, 



t-2 2** 
J=2 V 



(ui + f 2) \v + v 1 

3— z 

It remains to note that for i = n, in GF(2 nfc ) we have E™ =1 = Tr% (vq). 

Obviously, 5„(V) = if and only if Tr£ fc (t> ) = which is equivalent to 
v = u + u 2 " for some u E GF(2 nfc ) \ GF(2 2fc ) (since v E GF(2 k ) if and only if the 
corresponding u E GF(2 2fc )). It follows from the proof of Proposition [3] that the 
mapping from u E GF(2 nfc ) \ GF(2 2fc ) via v = u + u 2 " to V E GF(2 nfc )* defined 
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by (J7J is (2 3k — 2 fc )-to-l. Therefore, we have found GF( - 2 ^t^L^ 2 ~ distinct zeros 
of B n (x) in GF(2 nfc ) and if n is odd (resp. n is even) then this number is equal 
to *g£=± (resp. ^^). 

It is easy to check by induction that if i is odd (resp. % is even) then the 
algebraic degree of polynomials Bi(x) is equal to faE^[ (resp. ) since 

degS i+2 (z) = max{degS i+1 (x),2 ife + deg-B^x)} = 2 ifc + deg-B^x) . 

Further, if we define the sequence of polynomials B[(x) for i = l,...,n with 
B[(x) = B' 2 (x) = 1 and B' i+2 (x) = B' i+1 (x) + x^B'^x) then B^x) = B'^xf for 
i = 1, . . . ,n. Therefore, all zeros of B n {x) having the form of ([7]) with Tr£ fc (t> ) = 
have multiplicity at least 2 k . Finally, note that the number of these zeros 
multiplied by 2 k is equal to the degree of B n (x). □ 

Corollary 2 For any n > 1, polynomial Z n (x) splits in GF(2 nfc ) with all its zeros 
having the form of |?|) and without multiple roots. If n is odd (resp. n is even) 
then the total number of zeros of Z n (x) in GF(2 ) is equal to — 2 2k -\ — (resp. 

2(™+i)fc ok \ 

2^-1 )■ 

Proof. Using ([8]), it can be verified directly that B n+l {V) = VB^V) for 
any V G GF(2 nfc ) having the form of ([7]) (the case n = 2 is easily checked having 
the definition of -Bj(x)). Also, using the fact from the latest proof, we conclude 

_ i rz / \ l T-* f \ i • i n(n-\-l)k o2fc , o(n + l)fc ok ^ . „ 

that degz n (x) = aegB n+ i(x) and is equal to — 2 ik -i — ( res P- — 2 ik -i — > n 
is odd (resp. n is even). Denote S = {x G GF(2 nk ) \ GF(2 k ) \ Trf(x) ^ 0}. 
It follows from the proof of Proposition [2] that the mapping from v G S to 
V G GF(2 nfc )* defined by (JTJ is (2 k — l)-to-l. Recalling the corresponding fact 
from the latest proof, we conclude that the total number of distinct values of V 
obtained by (J7J) is equal to ^^w^^ + Dem g identical to the degree 
of Z n (x). Note that two different values of v G GF(2 nd ) \ GF(2 d ) with zero 
and nonzero trace in GF(2 d ) can not map to the same value V using ([7J since 
C n (V) = if and only if the trace of the corresponding v is also equal zero. □ 

Corollary 3 For any V G GF(2 nfc ) having the form of (0) with n > 2 and 
Trf(v ) ^ we have 

Tr nk ( BtiiY) \_ n _ Trnk ( Bti(V)B n+ i(V ) 
k \Bl k +\V)) k \ Bf+\V) 

where the second identity holds if and only if n is odd. 
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Proof. Using (jSJ), it can be verified directly that 



Bti(V)B n+1 (V) {vt + Trf ( Vo )) 



for any V G GF(2 nfc ) having the form of ([7]) and n > 2. Now note that 



n 

Trf («! £ «i) = Trf (^Trf fa,) + t; 2 ) = Trf (^ ) 2 + Tr 



3=2 

and thus, 

n 

Trf (fa + Tifivo))^) = Trf(<; )Trf {(Tr n k k (v )+ Vl )) = 

i=2 

if n is odd (and equal to Tr^ fc (f ) 2 7^ if n is even). □ 
Polynomials B^x) can be interpreted as the determinant of three-diagonal 
symmetric matrices (note a comprehensive study of these matrices in [9]). Indeed, 
for j < i let A x (j, 1) denote the determinant of matrix D x of size % — j + 2 that 
contains ones on the main diagonal and with D x (t, t + 1) = D x (t + 1, t) = Xj+t-i 
for t = 1, . . . ,i — j + 1, where the indices of are reduced modulo n. Expanding 
the determinant of D x by minors along the last row we obtain 

A x {j, i) =A x (j,i-l) + x 2 A x (j, % - 2) (9) 

assuming A x (j, i) = 1 if i—j G {—2, —1}. Comparing the latter recursive identity 
with (TJJ it is easy to see that 

A x (l,t)=B 2 +2 (x) . (10) 

Moreover, from the definition of the determinant it also follows that 

A x (l,i) 2tk = A x (l +t,i + t) for 0<t<n-l. (11) 

We will need the following result that can be obtained combining Theorems 5.6 
and 6.4 in HOI. 



Theorem 1 ([10j) Take polynomials over GF(2 nfc ) 

f(x)=x 2k+1 + b 2 x + b 2 and g(x) = b- 1 f(bx 2k - 1 ) = b 2k x 2 ' 2k - 1 + b 2 x 2k ~ 1 + b 
with b 7^ 0. Then exactly one of the following holds 
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(i) f(x) has none or two zeros in GF(2 nk ) and g(x) has none zeros in GF(2 nfc ); 

(ii) f(x) has one zero in GF(2 nk ) and g(x) has 2 k — 1 zeros in GF(2 nfc ); 

(Hi) f(x) has 2 k + 1 zeros in GF(2 nfe ) and g(x) has 2 2k - 1 zeros in GF(2" fc ). 

Let Ni denote the number of b G GF(2 nfc )* such that g(x) = has exactly i roots 
in GF(2" fc ). Then the following distribution holds for n odd (resp. n even) 

No = 2 2k -i [Tesp. 2 2k -l / ' 

N 2k _ x = 2^~^ k - 1 (resp. 2 ( - n -^ k ) , 

2 (n-l)fc_ 1 , 2 (n-l)fc_ 2 fc . 

iv 2 2fc_ 1 — 2' 2k -i [resp. 2 ' 2k -i ) • 

Let 

Mi = {a | a ^ 0, A a (x) has exactly i zeros in GF(2 nfe )} . 

Obviously, either A a (x) has no zeros in GF(2 nfc ) or it has exactly the same number 
of zeros as its linearized homogeneous part that is l a (x) = a±x 2 +x 2 +aox. The 
zeros in GF(2 nfc ) of l a (x) form a vector subspace over GF(2 fc ). In the following 
propositions, we prove that A a (x) always has a zero in GF(2 nfc ) so A a (x) and 
l a (x) have the same number of zeros in GF(2 nfc ) that can be equal to 1, 2 k or 2 2k . 
Assume a ^ 0, then dividing l a (x) by a aix (we remove one zero x — 0) and then 
substituting x with a$ l x leads to a{ 2 x 2 ^^ 1 + a x 2 x 2h ^ 1 + ajf 1 which has the form 
of polynomial g(x) from Theorem [1] taking b = a^ 1 (note a 1-to-l correspondence 
between a and b). Thus, \M { \ = for i G {l,2 fc ,2 2fc }. 

Proposition 1 For any a G GF(2 nfc )* ; polynomial A a (x) has exactly one zero 
in GF(2" fc ) if and only if Z n (a) ^ 0. Moreover, this zero is equal to V a = 
cB n (a) I Z n (a) and Tr n fc(V a ) = Trfc(nc). Also if n is odd (resp. n is even) then 

2(n+2)fc 2( n +i)' c _|_ \ '2(n+2)k 2( n +i)' ; 2 n ^ -|- 2 k -\- 1 

l M il = 21*— I ( res P- 2^1 } ' 

Proof. We start with proving that cB n (a) / Z n (a) indeed is a zero of A a (x) if 
Z n (a) ^ 0. First, for any v G GF(2 nfc ), using both recursive definitions of B n (x) 

m 



nk 

B n+l (v) +v B n _ 1 (v) 



= ZJv) 
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and thus, Z n (v) G GF(2 fc ). Therefore, 



A a (V a ) 



ZJa) 



m c 

Z n {a) 



aiB^ (a) + B 2 n (a) + a B n (a) + Z n (a) 



a 1 5 n _ 1 (a) + aia B n _ 2 (a) + (a) + a B n (a) + 



(12) 



(s n+ i(a) + aoS=* i(a) + Z n (a)) = 



Now we show that in our case V a is the only zero of A a (x). Taking equation 
A a {x) = and all its 2 lk powers we obtain n equations 



0,...,n 



a i+ ix i+2 + x i+ i + diXi + c = for i 

where all indices are calculated modulo n. If X{ (i — 0, . . . , n — 1) are considered 
as independent variables then the obtained system of n linear equations with n 
unknowns has the following matrix with the antidiagonal structure 



/ 


0"n-2 
1 







O-n-2 





a i 
1 







1 

a i 





a 



«0 




1 



(13) 



/ 



Let the columns of (flBl) be numbered from 1 to n. Permuting the columns in (flBl 
(reorder them as n — 1, n — 2, . . . , 1, n) we obtain the symmetric three-diagonal 
cyclic matrix M. n containing ones on the main diagonal, with A4 n (i,i + 1) = 
M. n {i + = cii for % = 1, ... ,n — 1 and with corner elements A4 n (l,n) = 
M. n {n, 1) = a . If x = (xi, . . . , x n _i, x ) T and c = (c, . . . , c) T then the system 
has the following matrix representation 

M n x = c . (14) 

The determinant of (jTBl is equal to the determinant of M. n and can be computed 
expanding the latter by minors along the last row. Doing this it is easy to see 
that 



det Mi 



A a (l,n- 2) + a n _i(a n _ 1 A (l,n - 3) + a • • • a„_ 2 ) 
+ a (a A a (2, n - 2) + a x . . . a„_i) 



JTUTTT1 



5n(«)+«Ll5Ll(«) + («oCll(«)) 2 



(6) 



^ +1 (a) + (a ^_ 1 (a))^ 
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Thus, if Z n (a) 7^ then (j!4p has exactly one solution. Now note that every 
v G GF(2 nfc ) with A a (v) = provides a solution to the system given by Vi = v 2 ' 
for i = 0, . . . , n — 1. Therefore, if Z n (a) 7^ then A a (x) has at most one zero. 

Using Corollary El we can obtain the number of a G GF(2 nfc )* such that 
Z n (a) 7^ (note that Z n (0) = 1). Observe that this number is identical to Nq from 
Theorem [1] that is equal to the number of a G GF(2 nfc )* such that l a (x) = has 
exactly one root in GF(2 n ) (see explanations following Theorem [I]). Therefore, 
if A a (x) has exactly one zero in GF(2 nfc ) then its homogeneous part l a (x) has the 
same number of zeros and so a is necessarily such that Z n (a) 7^ 0. 

Finally, to prove the trace identity for V a first note that for any v G GF(2 nfc ) 

Trf (B n (v) + Z n (v)) § Trf + B n+1 (v) + VoB^v)) (15) 

i Trf (B n (v) + B n (v) + v n ^B n ^(v) + VoB^v)) 
= Trf (v^B^v) + K-i^-i^)) 2 ") = . 
Therefore, since c and Z n (v) are both in GF(2 fc ), then 

Tr nfc (V„) = Tr nfc c + c — — 

V Z n (v) J 

= Tr k (nc) + Tr k (-^- Trf(B n (v) + Z n (v))j 

= Ti k (nc) . 

This completes the proof. □ 

Proposition 2 Let n be odd and take any a G GF(2 nfc )*. Then polynomial A a (x) 
has exactly 2 k zeros in GF(2 nfc ) if and only if Z n (a) = and B n (a) 7^ 0. Moreover, 
these zeros are the following 

^ R2 (2i+l)fc / s 

E B n-l \ a ) R ( \ 

^ 2 (2i+l)fc +2 2 I fe_ 1 / + M iJ f>l fl J 

i=0 n ' 

with fi G GF(2 fc ) and for each zero of this type Tr^t^t) = 0. Also |M 2 *| = 

<2(n—l)k j 

Proof. First, we consider l a (x) = a\x 22k + x 2k + a$x being the linearized 
homogeneous part of A a (x), and prove that it has exactly 2 k zeros in GF(2 nfc ) if 
and only if Z n (a) = and B n (a) 7^ 0. 

Assume that Z n (a) = and B n (a) 7^ 0. Then, by (1T21 . 

ai-B* (a) + B 2 n (a) + a 5 n (a) = (16) 
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which means that all 2 k distinct values fj,B n (a) for fi G GF(2 fe ) are zeros of l a {x). 
It is not difficult to see that in our case l a (x) can not have more than 2 fc zeros in 
GF(2 nfc ). Indeed, consider matrix Ai n of the system of n linear equations ( Tl4l) 
with c = 0. Note that det M. n = Z 2 (a) = and a principal submatrix obtained 
by deleting the last column and the last row from M. n is nonsingular with the 
determinant A a (l,ra — 2) = B 2 (a) ^ (see (flOl) ). Therefore, applying equivalent 
row transformations to A4 n we can obtain a matrix containing a nonsingular 
diagonal submatrix lying in the first n — 1 columns and rows. Thus, the equation 
given by the first row of this equivalent matrix is nonzero and has degree 2 k . We 
conclude that homogeneous system ( fl4l) can not have more than 2 k solutions and 
the same holds for the equation l a (x) = 0. 

Now we prove the converse implication. Assume that l a {x) has exactly 2 k 
zeros in GF(2 nfc ). Here we use the technique found by Bluher [10] for counting 
the number of b G GF(2 nfe )* for which fb{y) = y 2 +1 + by + b has exactly one 
zero in GF(2 nfe ). Denote S = {x G GF(2 nk ) \ GF(2 k ) \ Trf(x) ^ 0}. For any 

v G S define r = v x ~ 2k + 1 G GF(2 nfc ) \ {0, 1} and corresponding b = ^ °- 
Obviously, such an r is a zero of /&(?/). Note that 

r 2fc+1 k t t (v 4- v 2k ) 2k+1 

r + 1 v z +1 

where V comes from ([7]). Then, by Lemma [2] and Corollary (2j 5„(6 _1 ) 7^ and 
Zn(b~ r ) = 0. By the implication already proved, £5-1 (x) has exactly 2 k zeros 
in GF(2 nfc ). Multiplying the latter polynomial by fro^i^ -1 ( we remove one zero 
x = 0) and then substituting x with b y leads to b\ y 2 _1 + b\y 2 _1 + 61 with 
2 k — 1 zeros and having the form of polynomial g(x) from Theorem [TJ Thus, by 
(Jn]) in this theorem, /&(?/) (as well as f b2 i+i(y)) has exactly one zero in GF(2 nfc ). 

Now we prove that function ffTTl) that maps every t) G 5 to 6 G GF(2 nfc )* is a 
(2 fe — l)-to-l mapping. First, note that {2 k — l)-power is a {2 k — l)-to-l mapping 
of S to GF(2 nfe )*. Indeed, if x G S and x 2 ^ 1 = t then the latter identity holds 
for all distinct 5x G S with 5 G GF(2 fe )* since Trf (Sx) = 6Trf(x) ^ and 
Sx ^ GF(2 fc ). Thus, every r = t> 1-2 + 1 is obtained from 2 k — 1 different values of 
f . Finally, the mapping from r to b is 1-to-l since for the obtained b the equation 
fb(y) — has exactly one root r. 

Therefore, taking all v G 5 and using (fT7|) . we obtain |S'|/(2 fc — 1) different 
values of 6 G GF(2 nfc )* and this number is equal to the total number of b such 
that fb(y) has exactly one zero (see Theorem [1]). Therefore, these and only these 
values of b satisfying (fTTj) result in the polynomials fb{y) having exactly one zero. 

Dividing l a (x) by aoaix (we remove one zero x — 0) and then substituting x 
with a^y leads to a{ 2 y 22k ~ l + aj" 2 ?/ 2 ^ -1 + a^ 1 which has the form of polynomial 
g(x) from Theorem [1] taking b = a7/ . Thus, f a -i(y) (as well as f a - 2 '+i(y)) has 
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exactly one zero in GF(2 nfc ) and a~ l is obtained by f|T7|) . Therefore, by Lemma [2] 
and Corollary [21 B n (a) ^ and Z n (a) = 0. 

If A a (x) has exactly 2 k zeros in GF(2 nfc ) then the same holds for its ho- 
mogeneous part l a (x) and we already proved that in this case, Z n (a) = and 
B n (a) 7^ 0. Now we have to find a particular solution of A a (x) = assuming 
Z n {a) — and B n (a) ^ 0. By Corollary[2j a has the form of © and, by Lemma[2j 
Tr^ fc (f ) 7^ 0. Using these facts and assuming that n is odd (note that the latter 
assumption is involved only at this stage), we compute 

Bi_, (a) \ „ o2fc , , ^ B l n _ x (a) 



g2( 2i + 1 ) k +2 2ik ~l( a \ I 1 n v 1 ' -> JjO(2i+l)k + o2ik / N 

i=0 n I * = i n 

n-1 . 

+ ca x B n (a) rp^-: + c£? n (a) ^ R22lfc+2(2l -i )fc 



k — ~ (2' + l)k 

2 k Bl^a) >A £ 2 _\ ( a ) 

n— 1 (2' + l)fc ~ — ~ 2'k 

flP .P^f^V ^ L r R2 fc / nV^ B n-l( a ) 

Ct3 n K a ) 2_^, £>2( 2i +V k +2 2ik ( a \ + n ^ ^2 2lfc +2(«- 1 ) fc (' a ^ 
i=0 n ^ ' i=l n ^ ' 

D / \ Bn-l{ a ) . D 2 2fe / \ -^n-l( a ) , 

R 2*/ ^ ^ f ^nllW \ , flO^n-l(fl) + K^n-l )^ , 

(*) (a n _i J B„_ 1 (a)) 2fc +5f +1 (a) @J 
= c + c = , 

where (*) holds by Corollary [3] and since £> n+1 (a) = ao-B^_ 1 (a) resulting from §6§ 
ifZ n (a)=0. 

Finally, to prove the trace identity for first note that, by (TT5|) . Tr£ fc (£? n (a) + 
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Z n {a)) = Trf{B n {a)) = if Z n (a) = 0. Further, 

2 R2 (2i+l)fc , • s \ n-l 2 U^ k (n\ U^ i2i+j + 1)k ( n \ 

l Q J I = \^ B n K a ) B n~l W 

m^ i + l ) k +2 2lk ~l( n \ I 2-^1 2-^1 D2(2'+j + l)fc +2 ( 2, +j) fc (' /1 \ 
i=0 n ". \ a ) J j=0 i=0 n n W 

^ BtT k {a)YS Bt 3 -' M)k {a) h ( B^a) eS Bf i+1)k (a) 



a 



Tr 



nk 



^BtM E5o (B n+ i(a) + Bf +1 {a) 
(Trf(5 n+1 (a)) + J B n+1 (a)) 




Trf (5 n+1 (a))Trf -^-4 + Tr" fc 



where the latest identity follows by Corollary [31 

The identity for |M 2 *| follows from Theorem [TJ □ 
Now we are left with the remaining case when B n (a) = (then, obviously, 
Z n (a) = 0). In the following proposition, the "only if part follows from Proposi- 
tions [T] and [2J We provide this proof yet, independently of previous statements, 
since its major part contains the result used for proving the converse implication 
and also needed for proving the fact from Lemma [2j 

Proposition 3 Take any a G GF(2 nfe )*. Then polynomial l a (x) = a\X 22k + x 2k + 
oqx has exactly 2 2k zeros in GF(2 nfc ) if and only if B n (a) = 0. 

Proof. Assume that l a {x) has exactly 2 2h zeros in GF(2 nfc ). Here we use the 
technique found by Bluher [TQJ for counting the number of b G GF(2 nfc )* for which 
f b ( y ) = y^+i + by + b has 2 fe + l zeros in GF(2 nfc ). Denote G = GF(2 nfe )\GF(2 2fc ). 
Take any u G GF(2 nfc ) such that u GF(2 2fc ) which implies u 22k ^ u and 
(u + u 2 ) 2 7^ u + u 2 or, equivalently, u + u 2 GF(2 fc ). Now we can define r = 

(u + u 2k ) x ~ 2k + 1 G GF(2 nfc ) \ {0, 1} and corresponding b = ^ 0. Obviously, 

such an r is a zero of fb(y)- Define also r$ = ru 2k ~ l and r\ = r(u + l) 2h ~ l and 
note that r, r$ and r\ are pairwise distinct. Further, 

f b (r ) = r 2 fc +i u 2 2fc -i + 5 rn 2 fc -i + b _ b ^ r + ^ u 2 2k + ru 2 k +u y u = Q 
since r(u + u 2k ) 2k = u + u 22k by the definition of r. Also, similarly, we get 



Mn) = b((r+l)(u+l) 2 +r(u+l) 2 +( u +l))/{u+l) = 6(r+l+r+l)/(u+l) = 
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Thus, fb(y) with such a b has at least three zeros and, by Theorem [fl it has 2 k + 1 
zeros. Note that 

r 2k+1 i u y t t f?/ 4- ? ,2 2 ^2 fe +i 



r + 1 v 7 u 7 17 ( u + U 2*)2»+l 

where V comes from ([7j) assuming tj = u + u 2k . 

Now we prove that function ( fT8i) that maps every « G G to 6 G GF(2 nfc )* 
is a (2 3fe — 2 fc )-to-l mapping. First, note that u + u 2 is a 2 fc -to-l mapping 
onto F = {x G GF(2 nfe ) \ GF(2 fc ) | Trf (x) = 0}. Further, (2 fc - l)-power is 
a (2 fe — l)-to-l mapping of F to GF(2 nfc )*. Indeed, if x G F and x 2 *^ 1 = t 
then the latter identity holds for all distinct Sx G F with <5 G GF(2 fc )* since 
Ttf(5x) = STrf(x) = and Sx $ GF(2 fc ). Thus, every r = (u + u 2 ') 1 - 2 " + 1 
is obtained from 2 k (2 k — 1) different values of u. Finally, the mapping from r 
to b is (2 fe + l)-to-l since for the obtained b the equation = has (2 fc + 1) 
roots and every root r satisfies (r + G F 2 ~ 1 . Indeed, let r, ro and n be 
any distinct zeros of fb(y) (not necessarily the ones defined above) and define 
u — (r + ti)/{tq + ri). Note that 



rro(r + ro) 2 = r^r 2 +1 + rr 2 +1 = ro&(r + 1) + rb(ro + 1) = 6(r + ro) 

and so b = rro(r + ro) 2 *" -1 = rr\(r + ri) 2 * -1 = rori(ro + ri) 2 -1 . Then 

u 2 "- 1 = (r /r) 2fc+1 = (r + l)/(r + 1)^1 

and thus, u G G. The identity (r + 1) _1 = (u + 7j 2 ) 2 -1 G F 2 ^ 1 follows from 
[TUt Lemma 2.1]. 

Therefore, taking all u G G and using (|T8l) . we obtain |G|/(2 3fc — 2 fc ) different 
values of 6 G GF(2 nfc )* and this number is equal to the total number of b such 
that fb{y) has 2 k + 1 zeros (see Theorem [T]). Therefore, these and only these 
values of b satisfying (1181) result in the polynomials fb{y) having 2 k + 1 zeros. 

Dividing l a (x) by a a\x (we remove one zero x — 0) and then substituting x 
with dp 1 y leads to a^~ 2 y 2lh ~ l + a] -2 !/ 2 '' -1 + ct] -1 which has the form of polynomial 
<7(x) from Theorem [1] taking 6 = af 1 . Thus, f a -i{y) (as well as f 2 k+i(y)) has 
exactly 2 fc + 1 zeros in GF(2 nfe ) and a -1 is obtained by (|18p . Therefore, by 
Lemma [21 B n (a) = . 

The converse implication is easy now. If B n (a) = then, by Lemma [2j a 
has the form of ((Tj) with r> = w + w 2 for some u G G. Then the corresponding 
6 = a -1 has the form of (|T8|) and, by the fact proved above, the polynomial fb(y) 
has 2 fc + 1 zeros which, by Theorem [Tl (QUI) . is equivalent to l a (x) having 2 2fc zeros. 

□ 

In the following proposition, we prove that A a (x) = always has a solution 
if n is odd and Trfc(c) = 1 (which is also valid for even n but this case is not 
relevant to the current paper). 
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Proposition 4 Take any a G GF(2 nfc ) ; where n is odd and c G GF(2 fc ) with 
Tr^(c) = 1. Then polynomial A a (x) has at least one zero in GF(2 nfc ). Moreover, if 
A a (x) has exactly 2 2k zeros then Tr nk (v) = 1 for any v G GF(2 nfc ) with A a {y) = 

- I _ I o(n — l)fc i 

and \M 2 2k \ = 2 ik -i ■ 

Proof. Take any pair (a, v) G GF(2 nfc ) x GF(2" fc ) with v ^ c such that 
A a (v) = 0. Then, assuming b = a (^) 2 + \ we obtain 

k y 2 2k +2 k k V 2k + 1 

A b {v + c) = a 2 +(v + c) 2 + a + c 

(v + c) z {v + c) z 



[V + c 



— F (V fc (a 2 V 2fc + f 2 * + aw) + c 2 + c(t; 2fc + c)) 



. 



Since n is odd and Trfc(c) = 1, we obtain a 1-to-l correspondence between two 
sets 

S = {(a, v) | v ^ c, A a (v) = 0, Tr nk (v) = 0} and 
St = {(a, v) \ v ^ c, A a (V) = 0, Ti nk (v) = 1} 

/ x 2^ 4-1 

defined by (a, t> ) t— > (6, t> + c) with b = a and thus, |So| = |<Si|- Note 

that A a (c) = c(a 2 + a) = if and only if a G GF(2 fc ). Now, since A a (x) can have 
0, 1, 2 k or 2 2fc zeros, we can compute the following sum in two different ways 

= \ Sq \ - 1^1 -2 k 

(a,v): A a (v)=0 

= (_l)Tr nfc (c) + (_l) Tr nfc(V a ) + ^ ^ (-l) TTnk{v) + X 

aeA/i aeM 2k v. A a (v)=0 

= -l-|M!| + 2 fc |M 2fc |+X , 
by Propositions [1] and [21 where X = Y^aeM 2 h A a (v)=o(~ l) Tr " Jc( ^. Then 

X = 2 2k -l = -2 2fe (|GF(2" fc )*| - \M X \ - \M 2k \) 

which holds if and only only if |M 2 2fc| = 2( ^ 2 fc^~ 1 and Tr n fc(t>) = 1 for any v G 
GF(2 nfc ) with A a (v) = and a G M 2 2 k . Since \M X \ + |Af 2 *| + \M 2 2 k \ = |GF(2 nfc )*| 
and Aq(x) has a unique zero x — c, polynomial A a {x) has at least one zero in 
GF(2" fc ) for any a G G¥{2 nk ). □ 
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4 The Linearized Polynomial L a (z) 



The distribution of the four- valued cross-correlation function to be determined in 
Section [5] depends on the detailed distribution of the number of zeros in GF(2 2nfc ), 
with n > 2, of the linearized polynomial 

r / \ 2(" +1 ) fc i 2 k 2 k 2 2k i /in\ 

L a (z) = z +r a z + raz , (19) 

where n is odd, a G GF(2 nfc ) and r G GF(2 2nfc )* with r 2 " fc+1 = 1 but ^ i. 

For the details on linearized polynomials in general, the reader is referred to Lidl 
and Niederreiter [11]. It is clear that L a (z) does not have multiple roots if a ^ 0. 
In the following propositions, we always take L a (z) defined in ( fl9l) . 
Define polynomials Y n (x) over GF(2 nfc ) as 

Y n (x) = Z 2 n (x) + N n k k (x)(6 + 6- 1 ) , 

where 5 = r 2 fc +i e GF(2 2fc ) is a (2 fc + l) th root of unity over GF(2) and Z n (x) 
comes from ([6]). Also, for any v G GF(2 2nfc ) denote Vi = v T for i > so 
L a (z) = z n+ i + r\d\Z2 + r a 2 . Finally, for < j < i and x e GF(2 nfc ), let 
denote a three-diagonal matrix of size i — j + 2 that contains ones on the main 
diagonal and with 

Di% t+l) = r^ i+t ~\ j+t and D*{t + 1, t) = r^f' +t x j+t 

for t = 0, . . . ,i — j, where the indices of r, x and powers of r are reduced modulo 
n (the only exception is j + i = n when r„ = r ) , rows and columns of D^ 1 
are numbered from to % — j + 1. The determinant of -D£\ denoted as A^(j, z), 
can be computed expanding by minors along the last row to obtain 

A' x (j, i ) = A' x (j, i -l)+x 2 l A' x (j, i -2) 

assuming A' x (j, i) = 1 if z— j G {—2, —1}. Comparing the latter recursive identity 
with (JH]) it is easy to see that 

A' x {j 1 i) = A x {j,i) . (20) 

Zeros of L a (z) in GF(2 2rifc ) form a vector space over GF(2 2fc ). Since the degree 
of L a (z) is 2^ n+1 ^ k , the number of zeros is at most 2 <n+1 - )fc , and thus, the dimension 
of the vector space over GF(2 2fc ) is at most (n+ l)/2. Therefore, L a (z) has either 
1, 2 2k , 2 4fc , . . . , 2 { - n+l ^ k zeros in GF(2 2nfc ). However, in Proposition [6] we prove that 
L a (z) can not have more than 2 2fc zeros in GF(2 2nfc ) and thus, the only possibilities 
are either 1 or 2 2fc zeros. 
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Proposition 5 For any a E GF(2 nk )*, ifY n (a) ^ then L a (z) = has exactly 
one root in GF(2 2nk ) that is equal to zero. In particular, if Z n (a) = (Z n (x) 
defined in then L a (z) has exactly one zero. 

Proof. Obviously, L a (0) = and we have to show that this is the only zero 
of L a (z) in GF(2 2nfe ) if Y n (a) ^ 0. Taking equation L a (z) = and all its 2 2ik 
powers we obtain n equations 

-2 2 



Lf(x) 



for 



0, ...,n 



Z n +2i+l + r 2i+l a 2i+1^2i+2 + r 2j^2i^2i 

where all indices are calculated modulo 2n. If z 2 i (i — 0, . . . , n — 1) are considered 
as independent variables then matrix M. n of the obtained system of n linear 
equations with n unknowns consists of three cyclic antidiagonals and 

M n (i,(n-3)/2-i) = l , 
M n (i,n- i - 1) = r 2i a 2i , 

M n (i,n- i -2) = r 2 i + ia 2i+ i for % = 0, . . . , n - 1 , 

where rows and columns of Ai n (i, j) are numbered from to n— 1 and all elements 
of A4 n are indexed modulo n. 

Now permute the columns and rows of Ai n in the following way. Decimate 
the rows as i(n + l)/2 and columns as (n — 3)/2 + i(n — l)/2 modulo n for 
z = 0, . . . , n — 1 (note that gcd((n + l)/2, n) = gcd((n — l)/2, n) = 1). Then the 
obtained matrix Ai' n is three-diagonal cyclic with 

M' n {i, i) = M n {i{n + l)/2, (n - 3)/2 + z(n - l)/2) = 1 , 
M' n (i, i - 1) = .M n (i(n + l)/2, (n - 3)/2 + (i - l)(n - l)/2) = r i(n+1) a j(n+1) , 
.M' n (i, z + 1) = M n (i(n + l)/2, (n - 3)/2 + (z + l)(n - l)/2) = r i(n+1)+1 a i(n+ i )+1 

for i = 0, . . . , n — 1 (indices of r and a are calculated modulo 2n) since 

i(n + l)/2 + (n - 3) /2 + z'(n - l)/2 = (n - 3) /2 + z'n = (n - 3) /2 (mod n) , 
z(n + l)/2 + (n-3)/2 + (i-l)(n-l)/2 = -l + in = n-l (mod n) , 
i(n + l)/2 + (n-3)/2 + (i + l)(n-l)/2 = n-2 + in = n-2 (mod n) . 

Also note that Oj^+i) = ctj since a G GF(2 nfc ) and r,- 



i(n+l) 



r) since r r , 



r i 1 for any i > 0. Then for i — 0, . . . , n — 1 

L ^ aj+i and .M^(z + 1, z) 



r 



riai 



r x ai 



' n— l^n— 1 



i+1 

r a \ 


r n-l a "-l 
1 



SO 
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Note that a principal submatrix obtained by deleting the last column and the 
last row from Ai' n is exactly D\' n ~ 2 . 

We also have to apply the decimation (n — 3)/2 + i(n — l)/2 modulo n for 
i = 0, . . . , n — 1 (used to permute the columns of M) to the vector of unknowns 
(z2( n -i),Z2(n-2),---,Z2,zo). This results in z = (z n+1 , z 2 , z n+3 , . . . , z n _ u z ) T , 
where the increment for the index of z is equal to n — 1 starting from and 
going right to left (indices are calculated modulo 2n). Now, if = (0, . . . ,0) T 
then a new system has the following matrix representation 

M' n z = . (21) 

The determinant of A4 n is equal to the determinant of M.' n and can be computed 
expanding the latter by minors along the last row. Doing this it is easy to see 
that 



det M' n = A' a (l, n - 2) + r n ^a n ^ f r^a^ A' a (l, n - 3) + JJ 

/ n-l 

+ r^ao r a A' a (2, n - 2) + J[ 



n-2 



8=0 

n-l 

i=i 



S»(a) + ati^_i(a) + (a 5?li(a)) 2 + Nf (a)(5 + r 1 ) 



= Z*(a)+K?{a)(6 + 6- 1 )=Y n (a) . 

Thus, if F n (a) 7^ then (j2Til has only zero solution. Now note that every v G 
GF(2 2nfc ) with L a {y) = provides a solution to the system given by v 2 % = v 2 % 
for i = 0, . . . , n — 1. Therefore, if Y^(a) 7^ then L a (z) has at most one zero. 
Finally, note that if Z n (a) = (obviously, a ^ 0) then Y n (a) = N£ fe (a)(5 + 
7^ and thus, L a (z) has exactly one zero. □ 

Proposition 6 For any a G GF(2 nfc )*, L a (z) has at most 2 2k zeros in GF(2 2nfe ). 

Proof. Consider the homogeneous system of linear equations (121 j) defined 
by matrix Ai' n with z = (z n+ i, z 2 , z n+3 , . . . , z n _i, z ) T . Note that a principal 
submatrix obtained by deleting the last column and the last row from M! n is 
exactly D]^ n ~ 2 and 

det Dl' n ~ 2 = A' a (l, n - 2) # A Q (1, n - 2) # 5 2 (a) . 

After removing the last equation from (12 ip . we can write the remaining system 
as 

D x a n - 2 z' = (r a z , 0, . . . , 0, r^ 1 a n _ 1 z ) T , (22) 
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where z' = (z n+ i, z 2 , z n+ s, . . . , -2 n -i) T is obtained from z by deleting the last 
coordinate z . 

Let D\ ,n ~ 2 denote the adjoint matrix of D\' n ~ 2 (it is well known that 



D l,n-2 5 l,n-2 = 3^-2^-2 = ^ pln-2 . = . j 



n-1 



where l n -\ is the identity matrix of size n — Given a three-diagonal structure 
of Dl ,n ~ 2 , it is easy to compute the elements of D]^ n ~ 2 and to see that 

5^ n - 2 (l, 0) = rfV det D 3 a n ~ 2 and Di' n ~ 2 (l, n-2) = r^V^ r n _ 2 a n _ 2 . 

By (EUJ), (HUD and dHJ, detD^-2 = A a ( 3;n _ 2 ) = (£ 2 _ 2 (a)) 22 \ Also note that 
r i~^ = r o r i lr 2k+1 — To r r 1( ^~ 1 - Then, from (f2"2"|) we get that 

B 2 n {a)z 2 = rorf 1 ^a ai(5 2 _ 2 (a)) 22fc + (T 1 JJ a; j 20 • (23) 

Suppose that L a (z) has more than 2 2k zeros. These are also roots of equation 
(|23|) which has degree 2 2fc and this is possible only if the latter equation is iden- 

tically zero. Thus, in particular, B n (a) = and, by Lemma [21 a = - ^ ^ 2k+1 for 

some v E GF(2 nk ) \ GF(2 k ) with Trf(v ) = 0. Also, necessarily, 

n-1 

= a^iBl^a)) 22 " +5~ 1 l[a t 

8=2 

/ n _ 2 n -3 x 22k+1 

" ^o+^i)K+^) 2 (^2+^) vnr=i 3 K+^+i). 

(V2 + V 3 ) Yli~^{Vi + V i+l ) 2 {v n + V n+1 ) 

En 2 T~rn — 1 o 1 / \o r— 1 TTn— 1 
i=3 V t[ii=A Vj + Ql + V V 6 [U=2 V i V i+2 

(V + ^l)(fl + V 2 ) 2 (v 2 + V 3 ) H™~ 3 (Vi + V i+1 ) 2 

Thus, since Tr£ fc (v ) = J27=o v i = °> 

n n—1 n—1 

= W flf2f3 ^ U{ JJ + (Vl + V 2 ) 2 5~ 1 Yl ViV i+2 
i=3 i=4 i=2 

n—1 n—1 

= VqViV 2 v 3 (vi + v 2 ) 2 Y\ v i + ( v i + v 2 ) 2 5' 1 v v 1 v 2 v 3 Y\ v 2 



which leads to 5 = r 2k + 1 = 1 which contradicts the condition imposed on r. □ 
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Proposition 7 For any a G GF(2 nfc ) ; ifY n (a) = then L a (z) has 1 or 2 2k zeros 
in GF(2 2nfc ). Moreover, 

Tr 2nk (rav 2k+1 ) + Tr nk (v 2nk+1 )=0 

for any v G GF(2 2nfc ) with L a (v) = 0. 

Proof. The first statement directly follows from Proposition [6l Let V ^ 
be a zero of L a (z). Then all 2 2k zeros are given by fiV for every \i G GF(2 2fc ). 
For any v G GF(2 2nfc ) with L a (v) = we have v = /jV and 



Tr 2nfc (ra{^vf +1 ) + Tr nfe (fjiV) 



2" k +l 



= Tr nk ^ 2k+1 (raV 2k+1 + r 2 " a 2 " V ^ +1)k +^ k + V * nk +^ 
= Tr fc (fi 2k+1 Tr n k k (raV 2k+1 + r^aV 2 ^^ + ^ 2 " &+1 )) 

where Q = Trf (raV 2k+1 +r - 1 aV 2(n+1)k+2nk + V 2nk+1 ). We show now that Q = 0. 
To this end, we define 



yeGF(2 2 " fe ) 



_1 \Tr 2nfc (raj/ 2fe + 1 )+Tr nfe ( 3 / 2nfc + 1 ) 



and compute 



u 2 (a) = (-i) Tr ^ r < x2k+1+ y 2k+1 ^ +Tr ^ x2nk+1+ y 2nk+ ^ 

x,y£GF(2 2nk ) 

= E (-D 

y,veGF(2 2nk ) 

= ^ (-l) Tl2nk( 
y,veGF(2 2nk ) 

_ ^_^Tr 2nfc (raj; 2 ' i + 1 )+Tr nfc (D 2 '" ,; + 1 ) ^ ^Tr 2nfc (y 2 " L a 

v&G¥{2 2nk ) j,eGF(2 2 " fe ) 
_ 2 2nfc (_]_)Tr 2nfc ( 

j;GGF(2 2 " fe ),L a (t ; )=0 
_ 2 2nfc (_l)Trfc(A' 2fe+1 Q) 

^GGF(2 2fe ) 



NTV 2nfc (m((^+ 3/ ) 2fc + 1 +s / 2fc + 1 ))+Tr nfc ((^+j / ) 2nfc + 1 +s / 2n ' C + 1 ) 



(ra(v 2k y+vy 2k +v 2k +1 )+yv 2 " k )+Tr nk (V 2 ™* + 1 ) 
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Suppose that Q ^ 0. When /x runs through GF(2 2fc ) then Tr fc (/i 2+1 Q) takes 
on the value zero M = 1 + (2 k + l)(2 fe_1 — 1) times and the value one Mi = 
(2 k + 1)2* _1 times. Hence, M - M 1 = -2 k that implies 

U(b) 2 = 2 2nk (M - MO = _2 (2n+1)fe 

which is impossible. Thus, Q = and the proposition is proved. □ 



5 Four- Valued Cross Correlation 

In this section, we prove our main result formulated in Corollary [TJ We start by 
considering the following exponential sum denoted So (a) that to some extent is 
determined by the following lemma. 

Lemma 3 For an odd n > 2 and a G GF(2 nfc ) let So (a) be defined by 
So (a) = (-l) Tr2 - ( ^ fc+1)+Tr - (y2 " fc+1) • 

y£GF(2 2nk ) 

Then 

S (a) = 2 nk (-l) Tr "^ , 

veGF(2 nk ), A a {v)=0 

where A a (x) is defined in (TJ|) with c~ l = 5 + 5~ x for 5 being a primitive (2 k + l) th 
root of unity over GF(2). 

Proof. Let 5 be a primitive (2 k + l) th root of unity over GF(2) (note that 
5 G GF(2 2fc ) \ GF(2 fc )). Then any element in GF(2 2nfc ) can be written uniquely 
as y = u + Sv with u, v G GF(2 nfc ). 

Let y = y 2 " and c" 1 = 5 + <5 _1 G GF(2 fc ), then we obtain 

y 2*+l + -2*+l = {u + Sv f+1 + (m + 6 2* v f + l 

= (u 2k v + uv 2k )(5 + 5 2k ) 

i , nk cyk , 

= c (u V +UV ) 



and further 



+ u 2 vd + uv 2 5 2 +v 2 +i 



u 



U 2 + C lif + f 2 . 
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Hence, we get 

S (a) = (~l) Tl " k{a{y2k+1+tk+1)+y2nk+1) 

y£GF(2 2nk ) 

_ ~y ^ ^_^Tr nk (ac- 1 (u 2k v+uv 2k )+u 2 +c- 1 uv+v 2 ) 
u,v&GF(2 nk ) 

_ (_l^r nk (v) ^_^Tr nk (u 2k c- 1 (a 2k v 22k W k +av+c)) 

v£GF(2 nk ) ueGF(2" fc ) 

ueGF(2« fc ), A a (v)=0 

where A a (x) = a 2 * ' x 22k + x 2k + ax + c and c _1 = 5 + <5 _1 . Consider equation 
x 2 + c _1 x = 1 that has two roots 5 and 5~ l which are elements in GF(2 2fc ) but 
not in GF(2 fc ). Letting x = c~ x y we get y 2 + y = c 2 that has two solutions c5 
and C5- 1 which do not belong to GF(2 fc ). Thus, Tr fc (c 2 ) = Tr fc (c) = 1. □ 
We can now determine So (a) completely in the following corollary. 

Corollary 4 Under the conditions of Lemma\^the distribution of So (a) is given 
as follows: 

-2 nk if Z n {a) ^ , 
2 (n+i)fc % j z ^ = and Bn ( a j ^ o ; 

_ 2 (n+2)fc -y £^ Q ) = o . 

Proof. The distribution follows immediately from Lemma [3] and the results 
about the roots of A a (x) proved in Section [3j If Z n (a) ^ then we use Propo- 
sition [H if Z n (a) = and B n (a) ^ then Proposition [2] comes in handy and, 
finally, if B n (a) = then we need Propositions [3J and HI □ 



Lemma 4 For an odd n > 2 and a 6 GF(2 nfc ) let r = a^ 2 " ^ 2 , where a is a 
primitive element of GF(2 2rifc ) . Let also 

Sj ( a )= Yl (-l) Tr2 " fc(rJa ^ +1)+Tr " fcfe2 " fc+1) and 

y&GF{2 2nk ) 
y£GF(2 2nk ) 

for j = 1,2,...,2* _1 . T/ien 

^ Sj(a) = S 2 fc + i_, (a) /or j €{!,... ,2 fe_1 } and 
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(ii) ^(a) 2 = 2 2 ™ fc T a , 

where T a is the number of zeros in GF(2 2nfc ) of L a (z) defined in ( T7P|) with 
r l (resp. r ~( 2k+1 ~^ ) taken for r if 1 < i < 2 k ~ 1 (resp. 2 k ~ 1 < i < 2 k ). 

Proof, (i) For any j G {1, . . . ,2 k ~ 1 }, straightforward calculations give 

s .( a ) = j2 (-i) Tr 2^^' 2nfca2n ^ (2fc+i)2 " fc )+ Tr ^(s' (2nfc+i)2nfc ) 

yGGF(2 2 " fc ) 
xeGF(2 2nfe ) 

= S 2 k + i_j(a) . 

(ii) For any i G {l,...,2 fc } let d(i) = i if i G {1, . . . , 2 k ~ 1 } and = 
— (2 k + l — i) if z G {2 fe_1 + 1, . . . , 2 fc }. Exactly the same way as in the calculations 
of U 2 (a) in Proposition [7] we obtain 

5 .( Q )2 = ^ (_ 1 )Tr 2nfc (r d Wa(x 2fc +l+y 2fc + 1 ))+Tr nfc (x 2n ' C +l+^ n ' C + 1 ) 
x,yGGF(2 2rlfc ) 

= 2 2nk ^2 (_l^2nk(r d ^av 2k + 1 )+Tr nk (v 2nk + 1 ) 

DeGF(2 2 " fc ),L a (o)=0 

where L a (z) = z 2(n+1)k _|_ r A^ k a ^ k z 22k + r d ^az. And, finally, we have 

Tr 2nfc (r d «a^ +1 ) + Tr„ fc (^ +1 ) = 

for any zero t> G GF(2 2nfc ) of L a (z), by Propositions [5] and □ 
We are now in position to completely determine the distribution of S(a) de- 
fined in J2| for a G GF(2 nk )*. Since this is equivalent to the distribution of 
Cdty) + 1 for t = 0, 1, . . . , 2 nk — 2, our main result in Corollary [1] is a consequence 
of the theorem below. 

Theorem 2 Let m = 2nk and d = 2 ^jf , where n > 2 is odd and k > 1. T/ien 
£/ie exponential sum S(a) defined in /or a G GF(2 nfc )* (and Cd(r) + 1, /or 
r = 0, 1, . . . , 2 nfc — 2) have the following distribution: 

_2( n+1 ) fc occurs 2( ^ 2 fc| fc ~ 1 times , 

onfc (2 nfc -l)(2 fc - 1 -l) ,. 

—2 occurs 2*-i femes , 

occurs 2 ( - n ~ 1 ^ k — 1 times , 

onfc (2 nfc +l)2 fc - 1 

2 occurs - — 2?q~[ — femes . 
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Proof. Take a being a primitive element of GF(2 ) and let ind(a;) be 
defined as x = a md ^ for any x £ GF(2 2nfc ). Letting also r = a ( 2nk - l ) 2h ~ 1 
we observe that r 2 " L+1 = 1 and that r % is not a (2 k + l) th power in GF(2 2nfc ) 
for any % = 1,2, .. . , 2 k ~ 1 since ind(r l ) = i (mod 2 k + 1). It is also clear that 
ind(r^) = 2 2nk - 1 - ind(r l ) = 2 k + 1 - % (mod 2 k + 1). 

Finding the distribution of the cross-correlation function C&{r) + 1 is equiv- 
alent to computing the distribution of S(a) defined in (J2]) for a £ GF(2 fc )*. To 
calculate 5(a), we first observe that gcd(2 fc + 1, 2 m — 1) = 2 k + 1. If we first let 
x = y 2 +1 then x = r l y 2 +1 and, finally, x = r~ l y 2 +1 for i = 1, . . . , 2 k ~ 1 and ?/ 
running through GF(2 m ) then x will run through GF(2 m ) in total 2 k + 1 times. 
Further, since d(2 k + l)(2 nk + 1) = 2(2 nfc + 1) (mod 2 m - 1), we obtain 

2 fc-i 

(2 fc + l)5(a) = E (-l) Tr - (rl ^ 2fe+1)+Tr - ( ^ +1) 

i=0 j/£GF(2 m ) 

+ E E (-i) Trm(r_wfe+1)+Tr " fc(?/2 " fe+1) = E^(a) , 

*=1 J/GGF(2 m ) i=0 

where 5j(a) are defined as in Lemma HI We divide the proof into three cases. 
Case 1: (B n (a) = 0) 

In this case, Corollary |4] gives So (a) = — 2 <n+2 ) fc and, by Proposition [5j L a (z) 
has exactly one zero (since Z n (a) = by (|T2l ). Therefore, by Lemma H] (Jn|), 
Si(a) = ±2 nfe for all values of i = 1, 2, . . . , 2 k . Thus, 

(2 fc + l)S(a) = -2( n+2 ) fc + t2 nk , 

where \t\ < 2 k . Reduce both sides of the latter identity modulo 2 k + 1 to obtain 
1 - t = (mod 2 fc + 1). Since t is even then t ^ 1 and the only possibility is 
t = -2 k leading to S(a) = -2^ n +^ k . 
Case 2: (Z n (a) = and 5 n (a) ^ 0) 

In this case, Corollary @] gives So(a) = 2 ( - n+1 ^ >k and, by Proposition El L tt (2r) 
has exactly one zero. Therefore, by Lemma H] (In]), Sj(a) = ±2 nfe for all values of 
% = l,2,...,2 fc . Thus, 

(2 fc + l)S(a) = 2(" +1 ) fc + t2" fc , 

where |t| < 2 k . Reduce both sides of the latter identity modulo 2 k + 1 to obtain 
1 - t = (mod 2 k + 1). Since t is even then t ^ 1 and the only possibility is 
t = -2 k leading to S(a) = 0. 
Case 3: (Z n (a) ^ 0) 

In this case, Corollary 0] gives So (a) = — 2™ fc . Consider a set of 2 fc_1 values 
Y n (a) = Z 2 n {a) + Nf (a)(5 j + 5~ j ) for j = 1, 2, . . . , 2^ , 
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where 5 = a 2k + 1 is an element of multiplicative order 2 k + 1. If quadratic 
equation x + x~ x = Z^(a)fN^ k (a) has two solutions then the product of these is 
one and thus, there is at most one zero (say, when j = J) in this set. There- 
fore, by Propositions [7] and Lemma H] ([n]), Si(a) = ±2 nk for all values of 
i = 1, 2, . . . , 2 k except for, possibly, two with i = J and % = 2 k + 1 — J when 
Sj(a) = S 2k+1 _j(a) = ±2(" +1 ) fc , using Lemmal|. 

In the case when SAa) = ±2 nk for all values of % — 1, 2 2 fc , we have 



{2 k + l)S(a) = -2 nk + t2 nk , 

where \t\ < 2 k . Reduce both sides of the latter identity modulo 2 k + 1 to obtain 
1 — t = (mod 2 k + 1). Since t is even then t ^ 1 and the only possibility is 
t = -2 k leading to S(a) = -2 nk . 

Finally, in the case when Si(a) = ±2 nh for all values of % = 1, 2, . . . , 2 k except 
for two, we have 

(2 k + l)S{a) = -2 nk + t2 nk + e2 (n+1)fe+1 , 

where \t\ < 2 k — 2 and e G { — 1,+1}. Reduce both sides of the latter identity 
modulo 2 k + 1 to obtain 1 — t + 2e = (mod 2 k + 1). Since t is even then 
t ^ { — 1,3} and the only possibility is t = —{2 k — 2) and e = 1 leading to 
S(a) = 2 nk . 

The three cases above give, in total, the possible values 0, ±2 nk and — 2( n+1 ) fc 
for 5(a). Suppose the cross-correlation function C^r) + 1 takes on the value zero 
r times, the value 2 nk is taken on s times, the value — 2 nk occurs t times and the 
value — 2 (n+1 ) fc occurs v times. Since S(a) = —2 ( - n+1 ^ k is possible only in Case 1, 
when B n (a) = 0, then, by Lemma [21 v = ^afcl^r 1 ■ By Proposition El the number 
of a e GF(2 nfc )* such that Z n (a) = and B n (a) ^ is equal 2^ n ~^ k - 1. Thus, 
since S(a) = is possible only in Case 2, when Z n (a) = and B n (a) ^ 0, then 
7- = 2( n-1 ) fc — 1 

For the remaining values of S(a) = ±2 nk , obviously, 

n(n+2)k o(n+l)fc nnk i i 

. + t = 2*-l-(r + v) = i 2 22i _ l ■ 

On the other hand, from Lemma [1] it follows that 



2(n+l)k(2(n-l)k _ i \ 
2 nk _ 2 nk f _ 2 (n+l)k = 2 « fc ( s - t) L i = 2 

and 

2 k ^ 2 (n—l)k -|N _|_ 2^^ 2^ 1 



nk 



8-t=l+ 



)2fc 1 o2k 
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lhus, the solutions are s = - — — and t = ■ ^ 

The arguments in this paper also work for k = 1. However, in this case, the 
corresponding decimation d = (2" + l)/3 is only three- valued (see [1]). Indeed, 
in this case, 

35(a) = S (a) + Si(a) + S 2 (a) = S (a) + 25! (a) . 

It was proved in Proposition □ that Z n (a) G GF(2 fc ) = GF(2). Thus, if Z n (a) ^ 
then Z n (a) = 1 and the value of Si(a) is defined by whether 

Y n (a) = Z 2 (a) + N?(a)(5 + S' 1 ) = 1 + 6 + 5' 1 , 

where 5 = primitive in GF(4), is zero or not (note that a / 0). Since 

5 + 1 = 5 2 = 5~\ we have 5 + 5' 1 = 1. Therefore, if Z n (a) ^ then S(a) = 2 n 
and is never equal to — 2 n . This reduces the four-valued cross-correlation case to 
three values. 



6 Conclusions 

We have identified new pairs of m-sequences having different lengths 2 2nh — 1 and 
2 2k — 1, where n > 2 is odd and k > 1, with four- valued cross correlation and 
we have completely determined the cross-correlation distribution. These pairs 
differ from the sequences in the Kasami family by the property that instead of 
the decimation d = 1 we take d = ^jp ■ 
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